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The excerpt from the relevant Notice of reason for rejection 

• related claim: 1 
■ references: No. 1 and No. 2 
5 Following are the descriptions "the encrypted message 

authentication using a chaining technique" (p. 103-109) in 
reference No. 1 discloses. 

"One of the methods for applying the authentication 
mechanism is to utilize the error propagation characteristics 
10 gained from using a chaining technique. This concept can be 
explained for reference purposes with respect to a block 
chaining method using both plaintext and ciphertext for 
feedback (Fig. 2-16). This technique has an advantage that 
both security and authentication can be achieved in one 
15 operation . " 

"Suppose that X(l), X(2), X(n) are the plaintext 

blocks encrypted by a key K and an initialized vector Z, and 
that Y(l), Y(2),...,Y(n) are ciphertext blocks obtained as 
a result . " 

20 "Note that an additional plaintext block X(n+1) is 

attached to the end of the text to allow a computation Y(n+1)=AC 
to be performed. As one example, the additional block equals 
the initialized vector as a definition. As other approaches, 
the additional block may have a specified constant value, for 
25 example, all zero bits, or may use the first block X(l) 
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repeatedly . " 

"By judging if X(n+1) is equal to Z, it can be decided 
whether the recipient accepts or rejects the message (Fig. 
2-38). The receiving side accepts the message if X(n+1) is 
equal to Z, because only the sending side who knows the secret 
key K must first create Y(n+1) correctly. The message is 
rejected in other cases." (p. 104-105) 

Taking the description above. Fig. 2-38 and Fig. 2-16 
into consideration, reference No. 1 is summarized as follows. 

"A symmetric -key encryption method comprising the steps 

of: 

dividing plaintext composed of redundancy data and a 
message to generate a plurality of plaintext blocks each having 
a predetermined length; 

outputting a feedback value obtained as a result of 
operation on the plaintext block and the ciphertext block that 
is an encrypted block of the plaintext block concerned, said 
feedback value being fed back to another plaintext block; and 

performing an encryption operation using the plaintext 
block, a secret key and the feedback value obtained as a result 
of operation on another plaintext block to produce a ciphertext 
block. " 

The present invention concerning claim 1 "generates a 
random number sequence based on a secret key; generates a 
random number block corresponding to one of said plurality 
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of plaintext blocks from said random number sequence"; and 
uses the generated "random number blocks" for both a feedback 
value operation and an encryption operation for ciphertext 
blocks. Reference No. 1, on the other hand, does not generate 
random number blocks, but uses the ciphertext blocks for a 
feedback value operation, and uses a fixed secret key for an 
encryption operation for ciphertext blocks. 

There are the following descriptions in reference No. 

2: 

"This paper proposes a model which allows the concealment 
of plaintext as well as an authentication based on an 
information theoretical approach, showing an implemented 
example" (p.l "abstract"). 

"This paper argues about how a message authentication 
is important, in particular in a field of communications, 
proposing a technique for enabling a message authentication 
along with an encryption operation." 

"This research shows an approach that enables a message 
authentication by using pseudo random number sequence the size 
larger than a message length with a redundancy added by a fixed 
length, in a stream cipher field using pseudo random numbers 
in encryption operation." 

"A major targetY^this research lie in optimizing a 
throughput of both plaintext and ciphertext . For this purpose , 
the proposed method performs the calculation of cipher 



elements as independent of a plaintext and a ciphertext as 
possible. This approach is similar to dividing a block 
cipher operation into a key scheduling part and a data 
scrambling part. That is, it is similar to considering a 
problem of how constructing a stronger key scheduling part 
can make a data scrambling part simpler, when designing a block 
cipher mechanism." (p. 1-2 n l introduction) 

"In this section, symbols + and X denote addition and 
multiplication, respectively, in the general finite field, 
while -a and a" 1 about an element a denote the inverse elements 
in addition and multiplication, respectively. 

Theorem 2 Suppose that F is a finite field with the 
elements as many as q. Suppose that the number of elements 
in plaintext set P, ciphertext set C, and addition key set 
A is q, respectively; the number of elements in multiplication 
key set A is q-1. Suppose that the element of a certain 
plaintext, ciphertext, addition key or multiplication key 
embedded into the finite field is p, c, a or b (^=0), 
respectively. When a and b are given uniformly and at random, 
a cryptosystem where the ciphertext o is determined as follows 
proves safe inf ormation- theoretically in both concealment and 
completeness . " 

n c=(aX p )+b 

proof: [concealment] With a^O, a mapping f : p-^aXp is 
a bisection, b, which is selected uniformly and at random. 



is regarded as a encrypted key thrown away after one use, and 
this cryptography possesses information- theoretically safe 
concealment " . 

This characteristic is also implemented in terms of a 
cryptosystem defined by c=(a+p)Xb" (p. 3-4 n 4 implemented 
model and safety" 

"Our model finds the safety by computational complexity 
-non-linearity— not in a data scrambling part, but makes a 
pseudo random number generation independent of others, making 
the data scrambling part dedicated to scrambling. 

Here, it is convenient to consider a multiplication on 
the finite field as an ideal function for the purpose of 
scrambling. Concealment is maintained by adding random 
numbers while the change after alteration becomes not 
anticipated by multiplication. This technique guarantees 
that the change of ciphertext against different plaintexts 
grows uniform on the condition that the random numbers are 
thrown away after use. 

These techniques enable building the specific examples 
of cipher processing, characterized by a processing method 
using both the operations on a finite field and the pseudo 
random number sequence the size truly longer than that of the 
plaintext, as shown above." (p. 6 n 5.3 frequent key update 
and the design of block cipher) 

In summary, reference No. 2 describes the following: in 



order to simultaneously carry out both an encryption for 
concealment and message authentication, the technique 
utilizes the random numbers longer than the plaintext as 
addition keys and multiplication keys; and it encrypts a 
plaintext having a redundancy by adding and multiplying the 
plaintext and the keys on a finite field, with at least the 
addition keys thrown away after one use. 

The inventions described in reference No. 1 and No. 2 
have a feature of simultaneously carrying out both encryption 
and message authentication in common. It is obvious to one 
of ordinary skill in the art to apply the invention described 
in reference No. 2 to the invention described in reference 
No. 1 in such a manner that the ciphertext block operations 
use random number blocks each thrown away after use --that 
is, those corresponding to plaintext blocks- generated by 
pseudo random number generator, instead of fixed secret keys. 
Note that it is obvious to ordinary skill that the pseudo random 
number generator generates the random number sequence by use 
of a secret key. 

In addition, considering that a ciphertext is a kind of 
pseudo random number, there is hardly any particular 
difficulty in that the invention described in reference No.l 
uses random number blocks generated from random number 
sequence, instead of the ciphertext blocks, for the feedback 
value operations although the present invention uses 
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plaintext blocks and random number blocks for those 
operations . 

Accordingly, the present invention concerning claim 1 
is what ordinary skill would have been able to come around 
to that thinking, based on the inventions described in 
references No. 1 and No. 2. 



